revproxy with content-type="multipart/x-mixed-replace" causes DoS and memleaks

[johnlepikhin]

My backend returns infinite content stream of such type:

HTTP/1.0 200 OK Server: Motion/3.2.12+git20140228 Connection: close Max-Age: 0 Expires: 0 Cache-Control: no-cache, private Pragma: no-cache Content-Type: multipart/x-mixed-replace; boundary=--BoundaryString

--BoundaryString Content-type: image/jpeg Content-Length: 58777 [... content ...] --BoundaryString Content-type: image/jpeg Content-Length: 58881 [... content ...] ....

Issues:

• revproxy doesn't close connection to backend after user closed browser's window
• Ocsigen leaks memory infinitely while connection to backend is opened (and it's opened forever)
• after backend restart Ocsigen closes connections but do not release memory.

I use latest version from OPAM.

[Drup]

Could you please try with the cohttp version ? See https://github.com/ocsigen/ocsigenserver/pull/64

We are going to switch to that version soon(ish), so if it fixes it, all the better!